Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143062.roa
File: AS143062.roa (raw, json)
Hash identifier: m4B42jCP6ZVdC+3KbBlfhgYsvGscZ7+dW8K7hdm6j4A=
Subject key identifier: 88:50:23:42:52:6F:DC:4A:B6:1F:D8:46:65:D5:DC:18:E6:00:01:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 26F14FA7D7B8AA46B2AA2548C92451E6B9942715
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143062.roa
Signing time: Fri 22 May 2026 07:40:59 +0000
ROA not before: Fri 22 May 2026 07:35:59 +0000
ROA not after: Fri 21 May 2027 07:40:59 +0000
asID: 143062
IP address blocks: 240a:a19c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f1:4f:a7:d7:b8:aa:46:b2:aa:25:48:c9:24:51:e6:b9:94:27:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:59 2026 GMT
Not After : May 21 07:40:59 2027 GMT
Subject: CN=88502342526FDC4AB61FD84665D5DC18E60001BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:c1:5c:34:94:cb:f2:ea:22:cc:04:8b:33:
8c:d5:cf:bf:26:2c:6d:15:93:e5:00:22:c0:d4:dc:
46:1a:9e:af:1a:99:dc:cb:d7:db:62:38:bd:22:5d:
50:01:97:bc:c7:d6:a9:d9:e0:c4:02:76:71:4e:51:
3c:b5:70:d8:1b:ec:6a:16:6f:57:ef:70:f5:3c:43:
c1:c1:d4:11:d9:c5:59:b9:4e:87:71:2c:de:8b:2a:
d7:b6:76:26:3d:0d:27:c6:f9:9d:5b:77:28:46:ff:
59:0a:eb:54:91:e1:de:f6:33:7a:a1:2a:73:08:e5:
29:7d:9d:3b:7b:48:3b:e0:32:2a:b7:5b:0b:d0:15:
bb:86:3f:40:fa:12:da:6a:1d:7a:6d:49:87:53:f5:
71:63:e0:57:4c:67:5d:77:d9:9e:99:47:bc:c6:92:
47:9e:e8:0a:58:c0:4a:be:d2:da:d5:5b:d0:7d:52:
f5:a9:25:78:67:30:cc:15:26:47:f2:ff:b6:16:78:
07:ca:4b:44:10:22:ea:25:53:8b:48:89:6e:a3:77:
ff:d7:98:0c:dd:fb:90:40:c2:db:99:4a:c3:74:73:
c4:d8:31:aa:33:4e:ba:3c:16:e7:b8:91:da:64:42:
18:57:0c:18:f8:ae:84:d1:96:8d:42:28:18:0a:0e:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:50:23:42:52:6F:DC:4A:B6:1F:D8:46:65:D5:DC:18:E6:00:01:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143062.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a19c::/32
Signature Algorithm: sha256WithRSAEncryption
67:46:68:03:5a:93:85:70:1f:a1:ec:b2:af:48:7a:b6:d7:d0:
7d:fe:d5:b7:20:77:c1:06:aa:fa:ac:63:2d:b0:30:76:48:dc:
e2:b3:7d:15:12:51:e0:df:7b:cc:0f:ff:93:2d:c6:6d:64:ea:
dc:f0:8d:81:74:fc:ae:bd:cb:f1:9b:22:57:54:68:d0:ca:7b:
ef:f5:6c:8d:0c:5b:ee:1f:31:8a:49:6f:6a:4f:03:bc:a4:1f:
16:46:6d:d5:8d:aa:a2:45:de:fb:68:a2:25:07:a0:d7:ca:42:
af:a1:cf:88:f1:7b:88:e9:13:27:bc:9a:62:67:b1:41:3c:49:
7f:c9:19:5a:8b:fd:e3:22:fc:f9:c1:3b:77:30:b6:4e:62:75:
1e:be:7d:62:3b:49:b9:a6:95:e7:ac:00:37:c4:73:31:15:6b:
f6:cc:ae:a0:0a:46:be:32:cb:1e:77:b9:ff:9e:fa:eb:74:c0:
1c:1d:c7:94:ed:bd:62:6f:db:93:f8:aa:26:5c:88:9f:5d:ec:
97:f8:ad:32:31:83:ec:fa:0e:d3:7f:35:77:26:d4:d8:54:26:
15:47:5d:a0:a7:76:15:89:bc:a5:dc:3d:d6:5a:7d:38:26:d6:
52:20:0f:92:da:eb:0b:7f:ef:64:23:e1:45:1b:68:54:d2:d1:
f0:d6:6f:48
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJvFPp9e4qkayqiVIySRR5rmUJxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM1NTlaFw0yNzA1MjEwNzQwNTlaMDMxMTAvBgNV
BAMTKDg4NTAyMzQyNTI2RkRDNEFCNjFGRDg0NjY1RDVEQzE4RTYwMDAxQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColcFcNJTL8uoizASLM4zVz78m
LG0Vk+UAIsDU3EYanq8amdzL19tiOL0iXVABl7zH1qnZ4MQCdnFOUTy1cNgb7GoW
b1fvcPU8Q8HB1BHZxVm5TodxLN6LKte2diY9DSfG+Z1bdyhG/1kK61SR4d72M3qh
KnMI5Sl9nTt7SDvgMiq3WwvQFbuGP0D6EtpqHXptSYdT9XFj4FdMZ1132Z6ZR7zG
kkee6ApYwEq+0trVW9B9UvWpJXhnMMwVJkfy/7YWeAfKS0QQIuolU4tIiW6jd//X
mAzd+5BAwtuZSsN0c8TYMaozTro8Fue4kdpkQhhXDBj4roTRlo1CKBgKDqStAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUiFAjQlJv3Eq2H9hGZdXcGOYAAbswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQzMDYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhnDANBgkqhkiG9w0BAQsFAAOCAQEAZ0Zo
A1qThXAfoeyyr0h6ttfQff7VtyB3wQaq+qxjLbAwdkjc4rN9FRJR4N97zA//ky3G
bWTq3PCNgXT8rr3L8ZsiV1Ro0Mp77/VsjQxb7h8xiklvak8DvKQfFkZt1Y2qokXe
+2iiJQeg18pCr6HPiPF7iOkTJ7yaYmexQTxJf8kZWov94yL8+cE7dzC2TmJ1Hr59
YjtJuaaV56wAN8RzMRVr9syuoApGvjLLHne5/57663TAHB3HlO29Ym/bk/iqJlyI
n13sl/itMjGD7PoO0381dybU2FQmFUddoKd2FYm8pdw91lp9OCbWUiAPktrrC3/v
ZCPhRRtoVNLR8NZvSA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:12 2026 by rpki-client